us-ccpa-expert
California Consumer Privacy Act / California Privacy Rights Act Expert
Reference-depth expertise for the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This skill paraphrases the statute and cites California Civil Code section by section — never reproduce verbatim statute text.
Framework identity
- SCF framework ID:
usa-state-ca-ccpa-cpra-2026 - Region: Americas
- Country: United States
- Statute: California Civil Code §1798.100 et seq.
- Implementing regulations: 11 California Code of Regulations §7000 et seq.
- Regulators: California Privacy Protection Agency (CPPA) and the California Attorney General — both have civil-enforcement authority.
Framework in plain language
CCPA gives California residents ("consumers" in the statute, which includes households for some rights) the right to know what personal information a business collects about them, the right to delete and correct it, the right to opt out of its sale or sharing, and the right to limit a business's use of certain sensitive categories. CPRA — passed by California voters as Proposition 24 in November 2020 and operative January 1, 2023 with enforcement beginning July 1, 2023 — amended the original 2018 CCPA (effective 2020) by adding the right to correct, the right to limit use of Sensitive Personal Information, the new "share" concept covering cross-context behavioral advertising, the standalone CPPA agency, and a mandatory recognition of Universal Opt-Out Mechanisms such as the Global Privacy Control. CPRA also raised one of the applicability thresholds, removed the AG's prior 30-day mandatory cure period, and authorized CPPA rulemaking on risk assessments and cybersecurity audits for processing that presents significant risk.